EUVD-2015-5446

Malware in sbrugna...

Drupal Dynamic display block module security bypass vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Dynamic display block is one of the featured content slideshow modules. A security vulnerability exists in the Drupal Dynamic display block module in versions 7.x-1.1 and earlier. A...

Design/Logic Flaw

The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission...

CVE-2015-5491

CVE-2015-5491 concerns the Drupal module Dynamic display block (7.x-1.x) , where versions prior to 7.x-1.1 allow remote authenticated users with the administer ddblock permission to bypass access restrictions and read titles of restricted content. The root cause is improper access control in the ...